When implementing this library for a website, it is unclear how to retrieve the token secret to persist it between the two OAuth HTTP requests in the implementing-website's server-side store, such as a database for session data.
The way to do it is to declare state = {} and pass it to Rdio(consumer_token, consumer_secret, state). After invoking Rdio's begin_authentication() method, the token secret is accessible as state['access_token']['oauth_token_secret'].
This should be more clear in the project's documentation.